The tax authority plans to invest £205m in the data project, which was launched after an independent review of HMRC’s data protection practices. This found a failure to comply with data protection laws and to take action to deal with the issue, while records could not be updated or deleted.

The project will address significant risks in HMRC’s data protection and ensure compliance with the General Data Protection Regulation (GDPR).  

HMRC’s data protection remediation programme (DPRP) was introduced on 1 April 2021, according to information recently released by the Infrastructure and Projects Authority (IPA).

The scheme was launched after a review of the authority’s data protection practices in 2020, which identified ‘important issues that needed to be addressed’.

In